OpenSSL up to 3.0.14/3.1.6/3.2.2/3.3.1 TLS Server Certificate Check type confusion

Summaryinfo

A vulnerability, which was classified as problematic, has been found in OpenSSL up to 3.0.14/3.1.6/3.2.2/3.3.1. The affected element is an unknown function of the component TLS Server Certificate Check. This manipulation causes type confusion. This vulnerability appears as CVE-2024-6119. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in OpenSSL up to 3.0.14/3.1.6/3.2.2/3.3.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component TLS Server Certificate Check. The manipulation with an unknown input leads to a type confusion vulnerability. The CWE definition for the vulnerability is CWE-843. The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. As an impact it is known to affect availability. The summary by CVE is:

Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of service. Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address when comparing the expected name with an `otherName` subject alternative name of an X.509 certificate. This may result in an exception that terminates the application program. Note that basic certificate chain validation (signatures, dates, ...) is not affected, the denial of service can occur only when the application also specifies an expected DNS name, Email address or IP address. TLS servers rarely solicit client certificates, and even when they do, they generally don't perform a name check against a reference identifier (expected identity), but rather extract the presented identity after checking the certificate chain. So TLS servers are generally not affected and the severity of the issue is Moderate. The FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.

The weakness was presented by David Benjamin. It is possible to read the advisory at openssl-library.org. This vulnerability is known as CVE-2024-6119 since 06/18/2024. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 01/04/2026).

The vulnerability scanner Nessus provides a plugin with the ID 207819 (CBL Mariner 2.0 Security Update: cloud-hypervisor-cvm (CVE-2024-6119)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 3.0.15, 3.1.7, 3.2.3 or 3.3.2 eliminates this vulnerability. Applying the patch 06d1dc3fa96a2ba5a3e22735a033012aadc9f0d6 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the databases at Tenable (207819) and CERT Bund (WID-SEC-2024-2040). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Affected

• IBM InfoSphere Information Server
• HPE NonStop Server
• Red Hat Enterprise Linux
• Fedora Linux
• Ubuntu Linux
• F5 BIG-IP
• SUSE Linux
• Oracle Linux
• IBM SAN Volume Controller
• IBM FlashSystem
• Siemens SIMATIC S7
• NetApp Data ONTAP
• SUSE openSUSE
• RESF Rocky Linux
• IBM App Connect Enterprise
• Open Source OpenSSL
• Tenable Security Nessus
• Securepoint UTM
• Tenable Security Nessus Network Monitor
• Red Hat OpenShift
• IBM Rational Build Forge
• Hitachi Ops Center
• Insyde UEFI Firmware
• HPE HP-UX
• IBM Integration Bus
• IBM Storage Scale
• Juniper Junos Space
• SolarWinds Platform
• IBM Rational ClearCase
• IBM Rational ClearQuest
• IBM DB2
• IBM Spectrum Protect Plus
• Progress Software WS_FTP
• IBM VIOS
• IBM AIX
• Debian Linux
• FreeBSD Project FreeBSD OS

Productinfo

Type

• Network Encryption Software

Name

• OpenSSL

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9
• 3.0.10
• 3.0.11
• 3.0.12
• 3.0.13
• 3.0.14
• 3.1.0
• 3.1.1
• 3.1.2
• 3.1.3
• 3.1.4
• 3.1.5
• 3.1.6
• 3.2.0
• 3.2.1
• 3.2.2
• 3.3.0
• 3.3.1

License

• open-source

Website

• Product: https://www.openssl.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion